gitea-runner: workflow container.options passes host namespaces and capability flags to job container when privileged mode is disabled

[ Description ]Official description

Gitea Runner passes workflow-controlled container options into Docker job container configuration while privileged mode is disabled. Host namespace settings, expanded capabilities, and security profile overrides can remain effective despite Privileged being forced false. A workflow author able to run jobs on an affected Docker-backed runner can use these options to access host namespaces and execute commands as root on the runner host, bypassing the intended container isolation.

[ Fixes ]Fixes and patches

• gitea.com/gitea/runner 1.0.9-0.20260731160927-34bfa1915022Fixed version · GitHub Advisories · go package gitea.com/gitea/runner: upgrade to 1.0.9-0.20260731160927-34bfa1915022 or later (affected < 1.0.9-0.20260731160927-34bfa1915022)

[ Advisories ]Government CERT advisories

• BSI CERT-Bund14 Oct 2026WID-SEC-2026-3957

  Gitea: Vulnerability allows arbitrary code execution with administrator rights Translated from German

  CVE-2026-73802

[ Packages ]Affected open-source packages

• gitea.com/gitea/runner goAffected < 1.0.9-0.20260731160927-34bfa1915022 · fixed in 1.0.9-0.20260731160927-34bfa1915022 · GHSA-x4q3-gcj3-m6cf

[ References ]References

• blog.gitea.com/release-of-runner-3.0.0
• gitea.com/gitea/runner/releases/tag/v3.0.0
• github.com/go-gitea/gitea/security/advisories/GHSA-x4q3-gcj3-m6cf